adding header params depending on type of auth